I need urgent information on this domain / website

[shane mac]

Urgently needed. Overthepoles2018.com

They were offering flights over antarctica and a lot of people spent a lot of money booking this flight.
They were charging a small fortune and I know some people who have handed their money to book
the flight with them. Urgently required info on what exactly is going on as nobody can seem to get in touch
with them and their website is down. This looks like it has been one massive scam, can anyone provide
any information as to the owner / company anything would really help

Thank you

 

[viniproject09]

Its possible its a scam. I noticed their website is redirecting to Wix.

 

[shane mac]

Anything else you can add?

 

[MasterOfMyDomains]

Sounds to me like they flew the coop. Maybe use web.archive.org to find some old original contact info.

 

[shane mac]

The costs of these flights were tens of thousands of dollars

 

[soopasimon]

File a police report. They may be able to contact the registrar who will have more info, who is namecheap.

The domain is only 8 months old so maybe they could trace a paypal account address, or even a credit card that they paid with.

 

[soopasimon]

Is this him?

https://exploringagain.com/donations/over-the-poles-2018/?login=1

 

[shane mac]

No, thats one of the people ripped off by them

 

[kam]

Anything else you can add?

Whois Record for OverThePoles2018.com
Registrar NAMECHEAP INC
IANA ID: 1068
URL: http://www.namecheap.com
Whois Server: whois.namecheap.com

Registrar Status clientTransferProhibited
Dates 273 days old
Created on 2017-11-20
Expires on 2018-11-20
Updated on 2017-12-04

The domain is registered at namecheap.com.

May be you can send an email to namecheap.com and ask them to help you and forward message to the domain owner.

Anyway, someone claimed it's a scam back in 30 June 2018.

 

[soopasimon]

Is this him?
He says he is the 'curator' of the overthrpoles2018 project:

https://www.linkedin.com/in/polarexplorer2018

You've probably seen most of this yourself.
I'm just trying to help.

 

[kam]

Both domains are registered at namecheap.com.
ExploringAgain.com was registered 5 day before OverThePoles2018.com.
I think both domains are own by the same owner / scammer.

I also found that ExploringAgain.com using ns1.flatearthresistance.com as nameserver.
Flatearthresistance.com was also registered at Namecheap and it got registered 2 days before ExploringAgain.com.

ALL three domains are registered at namecheap and got registered within a week. I believed they were registered by the same person.

Anyway, I suggested you to ask namecheap to confirm this.

Once you confirmed those domains are also owned by the same owner, you should report the case to the police and notify paypal and google regarding the scam.

---------------------------

(Personal information removed by moderators for privacy/security reasons)

****************************************

 

[shane mac]

Brilliant work as always, ill forward this info on

 

[BaileyUK]

Anyway, someone claimed it's a scam back in 30 June 2018.

Thanks, Kam. That was well worth a watch just for the investigators knowledge and humor of such a scam. The amount of contradictions and disregard for Civil Aviation rules in their promotional material was simply mind-blowing

 

[kam]

Anyway, someone claimed it's a scam back in 30 June 2018.

Thanks, Kam. That was well worth a watch just for the investigators knowledge and humor of such a scam

Since we already trace it down to the server IP , do a reserve lookup and we found this.

we got a new tails AGAIN. http://completevisa.com shared the same server ip with exploringagain.com and flatearthresistance.com.
completevisa.com also registered at Namecheap. Wow, the owner is a loyal namecheap customer.

Let's check the DNS records and see if we found somethings in common.
We found that all 3 domains also using the same MX server, it means all 3 domains using the same mail box provider.

FInally, We found that he forgot to purchase privacy protection for completevisa.com. HERE IS THE WHOIS OF completevisa.com.

 

[shane mac]

Wow superb brilliant, thank you

 

[shane mac]

Can a link, concrete link be proven between overthepoles2018.com and any of the other 3 domains?

 

[kam]

Can a link, concrete link be proven between overthepoles2018.com and any of the other 3 domains?

What I can confirmed is completevisa.com had redirect to exploringagain.com in the past according to the record of waybackmachine.

I suggested you make a phone call namecheap and ask them to help.

According to cache, overthepoles2018.com was hosting on Namecheap hosting before.


DNS Record Analysis
Host Type TTL Extra
overthepoles2018.com A 1200 IP: 198.54.116.195
overthepoles2018.com NS 172800 Target: dns1.namecheaphosting.com
overthepoles2018.com NS 172800 Target: dns2.namecheaphosting.com
overthepoles2018.com SOA 604800 MNAME: dns1.namecheaphosting.com
RNAME: cpanel.tech.namecheap.com
Serial: 2017112108
Refresh: 86400
Retry: 7200
Expire: 3600000
overthepoles2018.com MX 1200 Target: mail.overthepoles2018.com
overthepoles2018.com TXT 1200 TXT: v=spf1 +a +mx +ip4:198.54.114.67
+ip4:198.54.116.67
+include:_spf.google.com ~all

 

[creataweb]

Didn't think they allowed anyone to fly over that land / ice mass = scam.

Good luck on the investigating, hopefully they get nailed for it.

 

[Jonathan MacDermid]

Just passed this info to someone else I was aware had booked tickets on the flight (a youtuber I subscribe to) he had mentioned on his last video that the site was down but thought it was an oversight on their wix account. Seems like he may be wrong.

If this has been a scam then I could see the FBI getting involved as the $ value of the Scam will be astronomical.

 

[soopasimon]

Well I hoped we all helped out and you do nail them.
Although I am new here I can see that you guys all help each other out.

Great forum.